-
Notifications
You must be signed in to change notification settings - Fork 30
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Logbert columnizer not reading the date and coming up all zeros? #15
Comments
Here is the regex I am using for that: |
Do you have an example log file (or a few lines of log) for me? |
Well here's one:
They all begin with that prefix. Strangely, some of these also have additionally lines after a log entry (another words, instead of just a single log line, they will be a line similar to what I posted above) followed by a line break CRLF and and then it'll just do a free for all for instance:
Not sure if that could be screwing it up. |
Based on your example log entries, i created a working columnizer. Paste the following XML fragment into the <Columnizer Name="Issue_15" DateTimeFormat="MM-dd-yy hh:mm:ss.fff">
<LogColumns>
<LogColumn Name="Timestamp" Expression="^([0-1][0-9]/[0-3][0-9]/[0-9][0-9] [0-9][0-9]:[0-5][0-9]:[0-5][0-9].[0-9][0-9][0-9]),.*" Optional="False" Type="1" />
<LogColumn Name="Unknown 1" Expression="^[0-1][0-9]/[0-3][0-9]/[0-9][0-9] [0-9][0-9]:[0-5][0-9]:[0-5][0-9].[0-9][0-9][0-9],[\s]*([0-9])[\s]*,.*" Optional="False" Type="0" />
<LogColumn Name="Unknown 2" Expression="^[0-1][0-9]/[0-3][0-9]/[0-9][0-9] [0-9][0-9]:[0-5][0-9]:[0-5][0-9].[0-9][0-9][0-9],[\s]*[0-9][\s]*,[\s]*([0-9])[\s]*,.*" Optional="False" Type="0" />
<LogColumn Name="Sender" Expression="^[0-1][0-9]/[0-3][0-9]/[0-9][0-9] [0-9][0-9]:[0-5][0-9]:[0-5][0-9].[0-9][0-9][0-9],[\s]*[0-9][\s]*,[\s]*[0-9][\s]*,([0-9A-Za-z]+),.*" Optional="False" Type="0" />
<LogColumn Name="Level" Expression="^[0-1][0-9]/[0-3][0-9]/[0-9][0-9] [0-9][0-9]:[0-5][0-9]:[0-5][0-9].[0-9][0-9][0-9],[\s]*[0-9][\s]*,[\s]*[0-9][\s]*,[0-9A-Za-z]+,[\s]*([0-9])[\s]*,.*" Optional="False" Type="2" />
<LogColumn Name="Message" Expression="^[0-1][0-9]/[0-3][0-9]/[0-9][0-9] [0-9][0-9]:[0-5][0-9]:[0-5][0-9].[0-9][0-9][0-9],[\s]*[0-9][\s]*,[\s]*[0-9][\s]*,[0-9A-Za-z]+,[\s]*[0-9][\s]*,((.|\n)*),.*" Optional="False" Type="3" />
</LogColumns>
<LogLevels>
<LogLevel Value="0" Level="1" />
<LogLevel Value="1" Level="2" />
<LogLevel Value="2" Level="4" />
<LogLevel Value="3" Level="8" />
<LogLevel Value="4" Level="16" />
<LogLevel Value="5" Level="32" />
</LogLevels>
</Columnizer> |
Thank you! I was not aware that LogBert could match like that using |
When I read the custom columnizer as a timestamp, how many matches do I need in my RegEx for that to display?
I used the button to specify the date format and that seemed to work, but the columnizer still reads it all as 00/00/00 00:00:00.00.000
The text was updated successfully, but these errors were encountered: